openstack/openstack-helm
Code Issues Proposed changes
2e1e538a7d
openstack-helm/neutron/values_overrides/netpol.yaml

14 lines
238 B
YAML
Raw Normal View History

Enable yamllint checks - brackets - braces - colon - commas - comments - document-end - document-start - empty-lines - hyphens - indentation - new-line-at-end-of-file - new-lines - octal-values - trailing-spaces with corresponding code adjustment. Also add yamllint.conf under the check. Change-Id: Ie6251c9063c9c99ebe7c6db54c65d45d6ee7a1d4
2020-05-21 10:09:37 -05:00
---
Add network policy nonvoting checks This change adds two network policy zuul checks, one for the compute-kit, and one for cinder/ceph, to test network policy for each OpenStack service. These checks will be non-voting initially. The network policy rules for each service will initially allow all traffic. These ingress/egress rules will be defined in future changes to only explicitly allow traffic between services that are explicitly allowed to communicate, other traffic will be denied. Depends-On: https://review.opendev.org/#/c/685130/ Change-Id: Ide2998ebb2af2832f24ca7abc398a82e4a6d70e3
2019-09-11 11:56:08 -05:00
manifests:
network_policy: true
Implements egress network policy This patch set adds in the egress policy for core OpenStack Services. Depends-On: https://review.opendev.org/#/c/679853/ Change-Id: I585ddabcbd640db784520c913af8eddecaee3843 Signed-off-by: Tin Lam <tlam@omegaprime.dev>
2019-09-29 20:36:36 -05:00
network_policy:
neutron:
egress:
- to:
- ipBlock:
Fix feature gate envvar overriding Currently using envsubst to perform substitution of value overrides in the feature gate caused conflicts as gotpl gets templated into those overrides. This adds in '%%%REPLACE_${var}%%%' and uses sed to perform the substitution instead to address the issue. This is to achieve parity with OSH-infra patch in [0]. [0] https://review.opendev.org/#/c/697749/ Depends-On: https://review.opendev.org/#/c/697749 Change-Id: I3ed504c65900e7b84728019f3acdf706a40c0427 Signed-off-by: Tin Lam <tlam@omegaprime.dev>
2019-12-07 16:22:27 -06:00
cidr: %%%REPLACE_API_ADDR%%%/32
Implements egress network policy This patch set adds in the egress policy for core OpenStack Services. Depends-On: https://review.opendev.org/#/c/679853/ Change-Id: I585ddabcbd640db784520c913af8eddecaee3843 Signed-off-by: Tin Lam <tlam@omegaprime.dev>
2019-09-29 20:36:36 -05:00
ports:
- protocol: TCP
Fix feature gate envvar overriding Currently using envsubst to perform substitution of value overrides in the feature gate caused conflicts as gotpl gets templated into those overrides. This adds in '%%%REPLACE_${var}%%%' and uses sed to perform the substitution instead to address the issue. This is to achieve parity with OSH-infra patch in [0]. [0] https://review.opendev.org/#/c/697749/ Depends-On: https://review.opendev.org/#/c/697749 Change-Id: I3ed504c65900e7b84728019f3acdf706a40c0427 Signed-off-by: Tin Lam <tlam@omegaprime.dev>
2019-12-07 16:22:27 -06:00
port: %%%REPLACE_API_PORT%%%
Enable yamllint checks - brackets - braces - colon - commas - comments - document-end - document-start - empty-lines - hyphens - indentation - new-line-at-end-of-file - new-lines - octal-values - trailing-spaces with corresponding code adjustment. Also add yamllint.conf under the check. Change-Id: Ie6251c9063c9c99ebe7c6db54c65d45d6ee7a1d4
2020-05-21 10:09:37 -05:00
...
Copy Permalink